@rubytech/create-maxy-code 0.1.405 → 0.1.408

package/payload/server/server.js

@@ -1307,7 +1307,7 @@ var serveStatic = (options = { root: "" }) => {
 // server/index.ts
 import { readFileSync as readFileSync35, existsSync as existsSync33, watchFile } from "fs";
 import { spawn as spawn3 } from "child_process";
-import { resolve as resolve33, join as join34, basename as basename13 } from "path";
+import { resolve as resolve33, join as join35, basename as basename13 } from "path";
 import { homedir as homedir3 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -4248,6 +4248,16 @@ function getStatus() {
 function getSocket(accountId) {
   return connections.get(accountId)?.sock ?? null;
 }
+function selectConnection(conns, accountId) {
+  const presentKeys = conns.map((c) => c.accountId);
+  const conn = conns.find((c) => c.accountId === accountId) ?? conns.find((c) => c.platformAccountId === accountId);
+  if (!conn) return { ok: false, reason: "key-miss", presentKeys };
+  if (!conn.sock) return { ok: false, reason: "disconnected", presentKeys };
+  return { ok: true, sock: conn.sock, accountId: conn.accountId };
+}
+function resolveSocket(accountId) {
+  return selectConnection(Array.from(connections.values()), accountId);
+}
 async function registerLoginSocket(accountId, sock, authDir) {
   if (!configDir) throw new Error("WhatsApp manager not initialized");
   let platformAccountId;
@@ -7442,11 +7452,15 @@ app2.post("/send-admin", async (c) => {
       );
     }
     const accountId = validateAccountId(body.accountId);
-    const sock = getSocket(accountId);
-    if (!sock) {
-      return c.json({ error: `WhatsApp account "${accountId}" is not connected.` }, 503);
+    const res = resolveSocket(accountId);
+    if (!res.ok) {
+      if (res.reason === "key-miss") {
+        console.error(`[whatsapp:outbound] op=socket-key-miss accountId=${accountId} presentKeys=${res.presentKeys.join(",") || "none"}`);
+        return c.json({ error: `No WhatsApp socket is registered for account "${accountId}" (present: ${res.presentKeys.join(", ") || "none"}). This is an account-keying mismatch, not a dropped connection.` }, 503);
+      }
+      return c.json({ error: `WhatsApp account "${accountId}" is registered but its socket is disconnected.` }, 503);
     }
-    const result = await sendTextMessage(sock, normalizeE164(phone), text, { accountId });
+    const result = await sendTextMessage(res.sock, normalizeE164(phone), text, { accountId: res.accountId });
     if (!result.success) {
       return c.json({ error: result.error ?? "send failed" }, 500);
     }
@@ -10501,6 +10515,9 @@ function claudeBin() {
   return process.env.CLAUDE_BIN ?? "claude";
 }
 
+// server/routes/onboarding.ts
+import { dirname as dirname8, join as join23 } from "path";
+
 // app/lib/claude-keychain.ts
 import { execFileSync as execFileSync2 } from "child_process";
 var CREDS_SERVICE_PREFIX = "Claude Code-credentials";
@@ -10567,6 +10584,15 @@ function bridgeKeychainToFile(deps) {
   deps.log(`[onboarding] op=login-writeback src=keychain dst=host-creds-file bytes=${blob.length}`);
   return { wrote: true, reason: "ok", bytes: blob.length, service };
 }
+function persistKeychainService(result, persist, log) {
+  if (!result.wrote || !result.service) return;
+  try {
+    persist(result.service);
+    log(`[onboarding] op=keychain-service-persist service=${JSON.stringify(result.service)}`);
+  } catch (err) {
+    log(`[onboarding] op=keychain-service-persist result=failed err=${err instanceof Error ? err.message : String(err)}`);
+  }
+}
 function listHostCredsMdats() {
   try {
     const out = execFileSync2("security", ["dump-keychain"], { encoding: "utf-8", timeout: 1e4 });
@@ -10879,7 +10905,7 @@ app9.post("/claude-auth", async (c) => {
     claudeProc2.stderr?.on("data", onClaudeOutput);
     claudeProc2.once("close", () => {
       closeSync3(claudeAuthLogFd);
-      bridgeKeychainToFile({
+      const writebackResult = bridgeKeychainToFile({
         platform: process.platform,
         before: darwinCredsBefore,
         listMdats: listHostCredsMdats,
@@ -10891,6 +10917,11 @@ app9.post("/claude-auth", async (c) => {
         },
         log: (line) => console.log(line)
       });
+      persistKeychainService(
+        writebackResult,
+        (service) => writeFileSync10(join23(dirname8(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
+        (line) => console.log(line)
+      );
       if (darwinAuthChild === claudeProc2) darwinAuthChild = null;
     });
     return c.json({ started: true, transport: "native" });
@@ -11154,8 +11185,8 @@ var onboarding_default = app9;
 
 // server/routes/client-error.ts
 import { appendFileSync as appendFileSync3, existsSync as existsSync16, renameSync as renameSync8, statSync as statSync9 } from "fs";
-import { join as join23 } from "path";
-var CLIENT_ERRORS_LOG = join23(LOG_DIR, "client-errors.log");
+import { join as join24 } from "path";
+var CLIENT_ERRORS_LOG = join24(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -11522,12 +11553,12 @@ import { resolve as resolve16, basename as basename8 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync17 } from "fs";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join24(dir, filename);
+    const fullPath = join25(dir, filename);
     if (existsSync17(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
@@ -12555,7 +12586,7 @@ var sessions_default = app17;
 
 // app/lib/claude-agent/spawn-context.ts
 import { existsSync as existsSync22, readFileSync as readFileSync27, readdirSync as readdirSync16, statSync as statSync11 } from "fs";
-import { dirname as dirname8, resolve as resolve19, join as join25 } from "path";
+import { dirname as dirname9, resolve as resolve19, join as join26 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -12596,8 +12627,8 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join25(pluginDir, "mcp/dist/index.js"),
-    join25(pluginDir, "mcp/src/index.ts")
+    join26(pluginDir, "mcp/dist/index.js"),
+    join26(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path2 of candidates) {
@@ -12655,21 +12686,21 @@ function listPluginDirs() {
   const platformPlugins = resolve19(PLATFORM_ROOT, "plugins");
   if (existsSync22(platformPlugins)) {
     for (const name of readdirSync16(platformPlugins)) {
-      const dir = join25(platformPlugins, name);
+      const dir = join26(platformPlugins, name);
       try {
         if (statSync11(dir).isDirectory()) out.set(name, dir);
       } catch {
       }
     }
   }
-  const premiumRoot = resolve19(dirname8(PLATFORM_ROOT), "premium-plugins");
+  const premiumRoot = resolve19(dirname9(PLATFORM_ROOT), "premium-plugins");
   if (existsSync22(premiumRoot)) {
     for (const bundle of readdirSync16(premiumRoot)) {
-      const bundlePlugins = join25(premiumRoot, bundle, "plugins");
+      const bundlePlugins = join26(premiumRoot, bundle, "plugins");
       if (!existsSync22(bundlePlugins)) continue;
       try {
         for (const name of readdirSync16(bundlePlugins)) {
-          const dir = join25(bundlePlugins, name);
+          const dir = join26(bundlePlugins, name);
           try {
             if (statSync11(dir).isDirectory()) out.set(name, dir);
           } catch {
@@ -12712,7 +12743,7 @@ function computeActivePlugins(accountId) {
   for (const name of Array.from(enabled).sort()) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join25(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join26(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -12729,7 +12760,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync22(join25(dir, "mcp/dist/index.js")) || existsSync22(join25(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync22(join26(dir, "mcp/dist/index.js")) || existsSync22(join26(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -12739,7 +12770,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join25(dir, relPath);
+      const skillPath = join26(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -12783,7 +12814,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join25(specialistsDir, file));
+    const fm = readFrontmatter(join26(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -13111,7 +13142,7 @@ import { createReadStream as createReadStream2, createWriteStream as createWrite
 import { readdir as readdir3, readFile as readFile4, stat as stat4, mkdir as mkdir3, unlink as unlink2, rename } from "fs/promises";
 import { realpathSync as realpathSync5 } from "fs";
 import { randomUUID as randomUUID9 } from "crypto";
-import { basename as basename10, dirname as dirname9, join as join27, relative as relative4, resolve as resolve22, sep as sep6 } from "path";
+import { basename as basename10, dirname as dirname10, join as join28, relative as relative4, resolve as resolve22, sep as sep6 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // ../lib/graph-trash/src/index.ts
@@ -13429,7 +13460,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve21, relative as relative3, join as join26, basename as basename9, extname as extname2, sep as sep5 } from "path";
+import { resolve as resolve21, relative as relative3, join as join27, basename as basename9, extname as extname2, sep as sep5 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
@@ -13511,7 +13542,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join26(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join27(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync2(
       "ocrmypdf",
@@ -13573,7 +13604,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join26(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join27(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -13594,7 +13625,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry of entries) {
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory() && entry.name === ".uploads-tmp") continue;
-    const abs = join26(root, entry.name);
+    const abs = join27(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -13950,7 +13981,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
-    const raw = await readFile4(join27(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile4(join28(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -13988,7 +14019,7 @@ async function readAccountNames() {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const meta = await readMeta(join27(absolute, entry.name), entry.name);
+    const meta = await readMeta(join28(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
       entry.mimeType = meta.mimeType;
@@ -14152,7 +14183,7 @@ app21.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join27(absolute, name);
+        const entryPath = join28(absolute, name);
         const s = await stat4(entryPath);
         entries.push({
           name,
@@ -14205,7 +14236,7 @@ app21.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
       return c.json({ error: "Not found" }, 404);
     }
-    const meta = readSidecarMeta(join27(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join28(projectDir, `${sessionId}.meta.json`));
     if (!meta.accountId || meta.accountId !== accountId) {
       console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
@@ -14292,7 +14323,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir3(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join27(dirAbsolute, d.name);
+    const child = join28(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -14341,7 +14372,7 @@ app21.get("/download-zip", requireAdminSession, async (c) => {
       const info = await stat4(absolute);
       if (info.isDirectory()) {
         dirsWalked++;
-        const parentAbs = dirname9(absolute);
+        const parentAbs = dirname10(absolute);
         for await (const fileAbs of walkRegularFiles(absolute)) {
           const within = relative4(absolute, fileAbs).split(sep6).join("/");
           const fileRel = relPath === "" || relPath === "." ? within : `${relPath}/${within}`;
@@ -14395,8 +14426,8 @@ async function resolveUploadTarget(c, accountId, uid) {
   const rawDir = c.req.query("path") ?? "";
   const base = resolveOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
-  const relDir = relpath ? dirname9(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join27(base.relative, relDir);
+  const relDir = relpath ? dirname10(relpath) : ".";
+  const destRel = relDir === "." ? base.relative : join28(base.relative, relDir);
   if (crossesForeignAccountPartition(destRel, accountId)) {
     console.error(`[data] account-scope-blocked endpoint="POST /api/admin/files/upload" path="${destRel}" account=${accountId.slice(0, 8)}\u2026`);
     return { ok: false, status: 404, error: "Not found" };
@@ -14772,7 +14803,7 @@ app21.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join27(dirname9(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join28(dirname10(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -14868,8 +14899,8 @@ app21.post("/rename", requireAdminSession, async (c) => {
     console.error(`[data] file-rename blocked path="${src.relative}" reason="protected"`);
     return c.json({ error: "Protected entry \u2014 refusing to rename" }, 403);
   }
-  const destAbs = resolve22(dirname9(src.absolute), newName);
-  const newRel = `${dirname9(src.relative)}/${newName}`.replace(/^\.\//, "");
+  const destAbs = resolve22(dirname10(src.absolute), newName);
+  const newRel = `${dirname10(src.relative)}/${newName}`.replace(/^\.\//, "");
   if (isProtectedFromRename(newRel)) {
     console.error(`[data] file-rename blocked path="${newRel}" reason="protected-target"`);
     return c.json({ error: "That name is reserved" }, 403);
@@ -17738,10 +17769,10 @@ var system_stats_default = app36;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync26, readFileSync as readFileSync29 } from "fs";
-import { resolve as resolve24, join as join28 } from "path";
+import { resolve as resolve24, join as join29 } from "path";
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve24(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join28(PLATFORM_ROOT6, "config", "brand.json");
+var brandJsonPath = join29(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync26(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync29(brandJsonPath, "utf-8"));
@@ -18528,7 +18559,7 @@ var browser_default = app44;
 
 // server/routes/admin/calendar.ts
 import { existsSync as existsSync27 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -18628,7 +18659,7 @@ function countVEvents(ics) {
 
 // server/lib/calendar-availability.ts
 import { readFileSync as readFileSync30 } from "fs";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -18637,7 +18668,7 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path2 = join29(accountDir, AVAILABILITY_FILENAME);
+  const path2 = join30(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
     raw = readFileSync30(path2, "utf-8");
@@ -18999,7 +19030,7 @@ app45.get("/booking-link", requireAdminSession, (c) => {
       console.error('[calendar] op=booking-link-fail err="no account configured"');
       return c.json({ bookingDomain: null });
     }
-    if (!existsSync27(join30(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync27(join31(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log("[calendar] op=booking-link bookingDomain=none source=availability-config");
       return c.json({ bookingDomain: null });
     }
@@ -19433,7 +19464,7 @@ var sites_default = app50;
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 import { mkdirSync as mkdirSync7, readFileSync as readFileSync32, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname10 } from "path";
+import { dirname as dirname11 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
 var DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -19450,7 +19481,7 @@ function getSecret() {
   }
   const fresh = randomBytes(SECRET_BYTES).toString("hex");
   try {
-    mkdirSync7(dirname10(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
+    mkdirSync7(dirname11(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
     writeFileSync11(VISITOR_TOKEN_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
@@ -19509,7 +19540,7 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync29, readFileSync as readFileSync33 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 var cached = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -19517,7 +19548,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot3 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot3) return null;
-  const brandPath = join31(platformRoot3, "config", "brand.json");
+  const brandPath = join32(platformRoot3, "config", "brand.json");
   if (!existsSync29(brandPath)) return null;
   try {
     cached = JSON.parse(readFileSync33(brandPath, "utf-8"));
@@ -20558,7 +20589,7 @@ async function startFileWatcher(opts = {}) {
 
 // app/lib/migrate-uploads.ts
 import { mkdir as mkdir5, readdir as readdir5, rename as rename2, rm as rm3 } from "fs/promises";
-import { dirname as dirname11, relative as relative6, resolve as resolve29 } from "path";
+import { dirname as dirname12, relative as relative6, resolve as resolve29 } from "path";
 var ACCOUNT_UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
   const out = [];
@@ -20590,7 +20621,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   for (const oldAbs of files) {
     const suffix = relative6(srcDir, oldAbs);
     const newAbs = resolve29(destDir, suffix);
-    await mkdir5(dirname11(newAbs), { recursive: true });
+    await mkdir5(dirname12(newAbs), { recursive: true });
     await rename2(oldAbs, newAbs);
     moved++;
     const oldRel = relative6(dataRoot, oldAbs);
@@ -20682,7 +20713,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir6, readFile as readFile6, rename as rename3, writeFile as writeFile4, unlink as unlink3 } from "fs/promises";
 import { existsSync as existsSync31 } from "fs";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -20727,7 +20758,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join32(projectsRoot, slug.name);
+    const slugDir = join33(projectsRoot, slug.name);
     let entries;
     try {
       entries = await readdir6(slugDir, { withFileTypes: true });
@@ -20736,9 +20767,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join32(slugDir, entry.name));
+        out.push(join33(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join32(slugDir, entry.name);
+        const subDir = join33(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir6(subDir, { withFileTypes: true });
@@ -20746,7 +20777,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join32(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join33(subDir, s.name));
         }
       }
     }
@@ -20758,7 +20789,7 @@ function shortId(path2) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join32(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join33(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -22815,12 +22846,12 @@ function startTelegramNativeFileFollower(input) {
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve31, join as join33 } from "path";
+import { resolve as resolve31, join as join34 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
@@ -23320,7 +23351,7 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join34(PLATFORM_ROOT8, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join35(PLATFORM_ROOT8, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync33(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -23359,7 +23390,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join34(homedir3(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join35(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync33(ALIAS_DOMAINS_PATH)) return null;
@@ -23391,7 +23422,7 @@ var app56 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve33(process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve33(process.env.MAXY_PLATFORM_ROOT ?? join35(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -23406,7 +23437,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve33(process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, ".."))
+      platformRoot: resolve33(process.env.MAXY_PLATFORM_ROOT ?? join35(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -23571,9 +23602,15 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   waHandleInbound: (input) => waGateway.handleInbound(input),
   tgHandleInbound: (input) => telegramGateway.handleInbound(input),
   sendWhatsAppText: async (accountId, destination, text) => {
-    const sock = getSocket(accountId);
-    if (!sock) throw new Error("WhatsApp disconnected \u2014 cannot deliver scheduled reply");
-    await sendTextMessage(sock, toWhatsappJid(destination), text, { accountId });
+    const res = resolveSocket(accountId);
+    if (!res.ok) {
+      if (res.reason === "key-miss") {
+        console.error(`[whatsapp-native] op=socket-key-miss accountId=${accountId} presentKeys=${res.presentKeys.join(",") || "none"}`);
+        throw new Error(`WhatsApp socket key miss: no socket is registered for accountId=${accountId} (present keys: ${res.presentKeys.join(",") || "none"}). This is an account-keying fault, not a dropped link \u2014 do not advise re-pairing.`);
+      }
+      throw new Error(`WhatsApp disconnected: the socket for accountId=${accountId} is registered but its transport is down; cannot deliver scheduled reply.`);
+    }
+    await sendTextMessage(res.sock, toWhatsappJid(destination), text, { accountId: res.accountId });
   },
   sendTelegramText: async (botToken, chatId, text) => {
     const sent = await sendTelegramText(botToken, chatId, text);
@@ -24048,7 +24085,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT8) return "unknown";
-    const versionFile = join34(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join35(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
     if (!existsSync33(versionFile)) return "unknown";
     const content = readFileSync35(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -24108,11 +24145,11 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join34(homedir3(), BRAND.configDir);
+  const configDir2 = join35(homedir3(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join34(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join35(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync33(cachePath)) return null;
     return JSON.parse(readFileSync35(cachePath, "utf-8"));
   } catch {
@@ -24336,7 +24373,7 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app56.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join35(__dirname, "..");
   const reconcileScript = resolve33(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const RECONCILE_INTERVAL_MS = 12e4;
   const runReconcile = () => {
@@ -24358,7 +24395,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   loop.unref();
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join35(__dirname, "..");
   const auditScript = resolve33(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -24626,7 +24663,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve33(process.env.MAXY_PLATFORM_ROOT ?? join34(__dirname, "..")),
+  platformRoot: resolve33(process.env.MAXY_PLATFORM_ROOT ?? join35(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (msg.isOwnerMirror) {